RE: [Declude.JunkMail] Hotmail not accept inbound mail?

2004-05-22 Thread Robert Shubert
Title: Message









Exactly what I had to do. I was skipping for 2 hours on failure, caching dns info, and doing
20 retries on 30 min intervals. Hotmail wasnt getting anything from me.
I switched back to letting my DNS server do the work (never really saw any benefit
anyway), turned off the skip on failure feature (also didnt make much of
a difference except to make my log files a little bigger) and increased my
retry to 24 times at one hour intervals. That immediately fixed the
problem.



I actually think things are running a
little better this way, likely because the extra effort the server does with
dns is offset by my longer retry interval. And I give mail a bigger chance to
get delivered to a problematic (or recently changed) mail server.



Robert





-Original
Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Friday, May 21, 2004 3:51 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail]
Hotmail not accept inbound mail?



I also turned off
Failed Domain Skipping for the same reasons, but I don't believe
that I had any issues besides temporary delays causing confusion when helping
clients get their servers back online after failures. I figure that with
all the processing power that goes into spam and virus blocking, caching and
failed domain skipping aren't but 0.1% of the utilization and it's likely safer
to turn them off. Who knows.

Matt



Colbeck, Andrew wrote:





Interestingly
enough, cacheing isn't the problem on our IMail side. Microsoft has not
removed the unresponsive hosts from their MX records despite the problem
persisting over a week and thosehosts never responding.
IfMicrosoft had changed their DNS, cacheing would be an issue.











Also, MSN
addresees would have the same queuing problem. The MX records for the MSN
domain(s) point to the Hotmail servers.











Since the
problem was particularly bad for us, we've put the dummy zone back in our mail
server's local DNS, with the 12,correction, 9out of 16 hosts that
do respond to us.











And no, I
won't share which 9 hosts with the mailing list, as I'm sure your subset of
hotmail servers would be different from mine, and these messages are archived
on the web for future admins to stumble over. If you really need to do
this too, look at the mail hosts and spend some time searching for those IP
addresses in your sys0521.txt log, but don't forget to check later and remove
your dummy zone when Hotmail returns to normal service.











Andrew 8)





-Original Message-
From: Matt [mailto:[EMAIL PROTECTED]] 
Sent: Friday, May 21, 2004 10:58
AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail]
Hotmail not accept inbound mail?

I turned off IMail's
internal DNS caching in order to avoid situations like this. I don't host
that many local accounts, but I haven't seen any build-ups in my spool either
time that Hotmail has had issues. My thought is that maybe you cached
records in IMail that corespond to the servers that aren't functioning
properly? This is one of the reasons why I turned this off at least.

Matt



Robert Shubert wrote:



Incidentally, Hotmail - as of a few day ago - does acknowledge theproblem and said they are working on it. I had to tell my server toretry for a day before I could start sending to hotmail again.R-Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, AndrewSent: Tuesday, May 18, 2004 12:40 PMTo: '[EMAIL PROTECTED]'Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail?I'm seeing 2 things:My default Imail queuing numbers gave too much emphasis on retry threadsandfrequency. I've lowered them.The same 1/4 of the Hotmail MX hosts are still down this week. Istuffedthe responsive ones into my cacheing DNS server in a hotmail.com zoneandthat alleviated the queue. The next day I checked my Imail log, becauseIwanted to get rid of that hotmail.com workaround before it bit me, and Ifound that the remaining 3/4 of the servers still regularly told myserverto come back later, refused connection, or dropped the connection.Andrew 8)-Original Message-From: David Lewis-Waller [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 18, 2004 2:52 AMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail?This looks like it's an ongoing, long term issue. DNReports MXconnectionproblems.http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com 

-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rick DavidsonSent: 11 May 2004 20:29To: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail?Yep hotmail is not accepting from us either, I am seeing connection resets from themRick DavidsonNational Systems ManagerNorth American Title Group-- Original Message -From: Colbeck, Andrew [EMAIL PROTECTED]To: [EMAIL PROTECTED]Sent: Tuesday, May 11, 2004 2:44 PMSubject: [Declude.JunkMail] Hotmail not accept 

[Declude.JunkMail] Header vs Body question

2004-05-22 Thread Goran Jovanovic








Hi all,



I have a question about where the HEADERS stop and the BODY
starts with respect to the filtering files HEADERS and BODY commands.



When an e-mail hits my SPAM threshold (10) I do an ATTACH
command. 



The first is the header that I see when I use
Outlook to View | Options of the mail that appeared in my inbox. Below this is
the header that gets placed into the wrapper message from the %HEADERS%
variable. What I am really trying to understand is what section is the line



Content-Type: application/vnd.ms-excel;



Found in? Is it HEADERS or BODY? If it is HEADERS then why
does the %HEADERS% variable not report it in the spam wrapper?



Thanx



-- From Outlook Header
-



Microsoft Mail Internet Headers Version 2.0

Received: from navmail.lanshop.com ([10.0.0.4]) by
mail1.lanshop.com with Microsoft SMTPSVC(5.0.2195.6713);

 Fri,
14 May 2004 15:51:32 -0400

Received: from bigdee.com ([66.36.230.43])

by navmail.lanshop.com (SAVSMTP 3.1.2.35) with SMTP id
M2004051415513117970

; Fri, 14 May 2004 15:51:31 -0400

Message-ID: [EMAIL PROTECTED]

From: Anti-SPAM Service [EMAIL PROTECTED]

To: [EMAIL PROTECTED]

Subject: ***[SPAM]***[10]***competitive upgrade...

Date: Fri, 14 May 2004 19:53:35 -

MIME-Version: 1.0

Content-Type: multipart/mixed;

 boundary=SomeRandomStuffGoesHere

X-RBL-Warning: HELOBOGUS: Domain
ROSMIME03.enterprise.veritas.com has no MX or A records [0301].

X-RBL-Warning: IPNOTINMX: 

X-RBL-Warning: NOLEGITCONTENT: No content unique to
legitimate E-mail detected.

X-Declude-Sender: [EMAIL PROTECTED] [143.127.131.4]

X-Declude-Spoolname: D23b90f5f008a3926.SMD

X-Note:


X-Note: Process Time: Scanned at 15:53:35 on 05/14/2004

X-Note: Reverse DNS: Sent from
skyway-bridge.veritas.com ([143.127.131.4]).

X-Note: Country Path: UNITED STATES-destination

X-Note: 

X-Note: Tests Failed: HELOBOGUS, IPNOTINMX, NOLEGITCONTENT,
WEIGHT10, FILTER-VIAGRA-RXc [10]

X-Note: 

X-Note: Sender: [EMAIL PROTECTED]

X-Note: Spool File: D23b90f5f008a3926.SMD

X-Note: 

X-Note: This E-mail was scanned by Declude JunkMail version
1.79i6

X-Note: Total spam weight of this E-mail is 10.

X-Note:


Return-Path: [EMAIL PROTECTED]

X-OriginalArrivalTime: 14 May 2004 19:51:32.0075 (UTC)
FILETIME=[DAE56BB0:01C439EC]



--SomeRandomStuffGoesHere

Content-Type: text/plain;

 charset=iso-8859-1

Content-Transfer-Encoding: 7bit



--SomeRandomStuffGoesHere

Content-Type: message/rfc822;

 name=spam.eml

Content-Transfer-Encoding: 7bit

Content-Disposition: attachment;

 filename=spam.eml



Received: from ROSMIME03.enterprise.veritas.com
[143.127.131.4] by bigdee.com with ESMTP

 (SMTPD32-8.10) id A3B9F5F008A; Fri, 14 May 2004
15:53:29 -0400

Received: from lmoxch01.enterprise.veritas.com (unverified)
by ROSMIME03.enterprise.veritas.com

(Content Technologies SMTPRS 4.3.12) with ESMTP id
[EMAIL PROTECTED] for [EMAIL PROTECTED];

Fri, 14 May 2004 14:51:23 -0500

Received: by lmoxch01.enterprise.veritas.com with Internet
Mail Service (5.5.2656.59)

 id
K6WLDCM1; Fri, 14 May 2004 15:51:22 -0400

Message-ID:
[EMAIL PROTECTED]

From: Paulo Chen [EMAIL PROTECTED]

To: '[EMAIL PROTECTED]' [EMAIL PROTECTED]

Subject: competitive upgrade...

Date: Fri, 14 May 2004 15:51:20 -0400

MIME-Version: 1.0

X-Mailer: Internet Mail Service (5.5.2656.59)

Content-Type: multipart/mixed;

 boundary=_=_NextPart_000_01C439EC.C3B973B4



--_=_NextPart_000_01C439EC.C3B973B4

Content-Type: text/plain;

 charset=iso-8859-1



--_=_NextPart_000_01C439EC.C3B973B4

Content-Type: application/vnd.ms-excel;

 name=VERITAS
Competitive Upgrade Promo 2004.xls

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

 filename=VERITAS
Competitive Upgrade Promo 2004.xls



--_=_NextPart_000_01C439EC.C3B973B4--

--SomeRandomStuffGoesHere--



-- From %HEADERS% Variable in
the spam.eml wrapper -



Received: from
ROSMIME03.enterprise.veritas.com [143.127.131.4] by bigdee.com with ESMTP

 (SMTPD32-8.10) id
A3B9F5F008A; Fri, 14 May 2004 15:53:29 -0400

Received: from
lmoxch01.enterprise.veritas.com (unverified) by
ROSMIME03.enterprise.veritas.com (Content Technologies SMTPRS 4.3.12)
with ESMTP id [EMAIL PROTECTED]
for [EMAIL PROTECTED]; Fri, 14 May 2004 14:51:23 -0500

Received: by
lmoxch01.enterprise.veritas.com with Internet Mail Service (5.5.2656.59)

 id
K6WLDCM1; Fri, 14 May 2004 15:51:22 -0400

Message-ID:
[EMAIL PROTECTED]

From: Paulo Chen
[EMAIL PROTECTED]

To:
'[EMAIL PROTECTED]' [EMAIL PROTECTED]

Subject: competitive
upgrade...

Date: Fri, 14 May 2004
15:51:20 -0400

MIME-Version: 1.0

X-Mailer: Internet
Mail Service (5.5.2656.59)

Content-Type:
multipart/mixed;

 boundary=_=_NextPart_000_01C439EC.C3B973B4